another attempt to get login data, and fix urls.py to allow admin access